Aller au contenu

Vulnérabilités de Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-47295 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 14 juil. 2026
CVE-2026-55002 External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 14 juil. 2026
CVE-2026-54118 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network 9.8 Critique 14 juil. 2026
CVE-2026-47296 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 7.5 Élevée 14 juil. 2026
CVE-2026-40370 External control of file name or path in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 12 mai 2026
CVE-2026-32176 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 6.7 Moyenne 14 avr. 2026
CVE-2026-32167 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 6.7 Moyenne 14 avr. 2026
CVE-2026-26115 Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over… 8.8 Élevée 10 mars 2026
CVE-2026-21262 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 10 mars 2026
CVE-2025-59499 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 11 nov. 2025
CVE-2025-55227 Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized… 8.8 Élevée 9 sept. 2025
CVE-2025-47997 Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an… 6.5 Moyenne 9 sept. 2025
CVE-2025-49759 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 12 août 2025
CVE-2025-24999 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 12 août 2025
CVE-2025-53727 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 12 août 2025
CVE-2025-49758 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 12 août 2025
CVE-2024-49021 Microsoft SQL Server Remote Code Execution Vulnerability 7.8 Élevée 12 nov. 2024
CVE-2024-49018 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49017 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49016 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49015 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49014 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49013 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49012 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024
CVE-2024-49011 SQL Server Native Client Remote Code Execution Vulnerability 8.8 Élevée 12 nov. 2024

Autres produits Microsoft